mirror_php/ImoutoIB
1
0
Fork 0
mirror of https://github.com/ithrts/ImoutoIB.git synced 2025-04-21 22:11:57 +02:00
Code Issues Projects Releases Wiki Activity
ImoutoIB/delete-report.php
Sanpaku 20a66f2010 report captcha + better report 
added captcha for reports and cleaned it up slightly
2021-12-27 22:45:14 +01:00

355 lines
14 KiB
PHP
Raw Permalink Blame History

<?php
require 'require.php';
//if captcha required?
if (empty($_POST)) {
error('No post request received.');
}
//cleanse
if (isset($_POST["delete"])) {
$delrep_delete = phpClean($_POST["delete"]);
}
if (isset($_POST["report"])) {
$delrep_report = phpClean($_POST["report"]);
}
if (isset($_POST["board"])) {
$delrep_board = phpClean($_POST["board"]);
}
if (isset($_POST["thread"])) {
$delrep_thread = phpClean($_POST["thread"]);
}
if (isset($_POST["reply"])) {
$delrep_reply = phpClean($_POST["reply"]);
}
if (isset($_POST["password"])) {
$delete_password = phpClean($_POST["password"]);
}
if (isset($_POST["file"])) {
$delete_file = phpClean($_POST["file"]);
}
if (isset($_POST["reason"])) {
$report_reason = phpClean($_POST["reason"]);
if (strlen($report_reason) > 256) {
error('Report too long. Maximum 256.');
}
}
if (isset($_POST["global"])) {
$report_global = phpClean($_POST["global"]);
}
if (ctype_alnum($delrep_board) != true || ctype_alnum($delrep_thread) != true || ctype_alnum($delrep_reply) != true) {
error('Invalid board, thread, or reply. Must be alphanumeric.');
}
//DOES BOARD EXIST?
if (!in_Array($delrep_board, $config['boardlist'])) {
error('Board does not exist.');
}
//DOES REPLY EXIST
if ($delrep_reply != $delrep_thread) {
if (isset($delrep_reply) && (!file_exists($path . '/' . $database_folder . '/boards/' . $delrep_board . '/' . $delrep_thread . '/' . $delrep_reply . '.php'))) {
error('Reply does not exist.');
}
}
//DOES THREAD EXIST?
if (isset($delrep_thread) && (!file_exists($path . '/' . $database_folder . '/boards/' . $delrep_board . '/' . $delrep_thread . '/OP.php'))) {
error('Thread does not exist.');
}
//OK THEN CONTINUE:
//MOD THREAD BUTTONS
if ($logged_in == true) {
//STICKY
if (($config['mod']['thread_sticky'] <= $mod_level) && isset($_POST['sticky'])) {
$thread_info = file_get_contents($path . '/' . $database_folder . '/boards/' . $delrep_board . '/' . $delrep_thread . '/info.php');
if (preg_match('/\$info_sticky=1;/i', $thread_info) == true) {
$thread_info = preg_replace('/\$info_sticky=1;/i', '$info_sticky=0;', $thread_info);
$thread_sticky = false;
} else {
$thread_info = preg_replace('/\$info_sticky=0;/i', '$info_sticky=1;', $thread_info);
$thread_sticky = true;
}
file_put_contents($path . '/' . $database_folder . '/boards/' . $delrep_board . '/' . $delrep_thread . '/info.php', $thread_info);
if ($thread_sticky == true) {
error("Thread has been stickied.", true);
} else {
error("Thread has been unstickied.", true);
}
}
//LOCK
if (($config['mod']['thread_lock'] <= $mod_level) && isset($_POST['lock'])) {
$thread_info = file_get_contents($path . '/' . $database_folder . '/boards/' . $delrep_board . '/' . $delrep_thread . '/info.php');
if (preg_match('/\$info_locked=1;/i', $thread_info) == true) {
$thread_info = preg_replace('/\$info_locked=1;/i', '$info_locked=0;', $thread_info);
$thread_locked = false;
} else {
$thread_info = preg_replace('/\$info_locked=0;/i', '$info_locked=1;', $thread_info);
$thread_locked = true;
}
file_put_contents($path . '/' . $database_folder . '/boards/' . $delrep_board . '/' . $delrep_thread . '/info.php', $thread_info);
if ($thread_locked == true) {
error("Thread has been locked.", true);
} else {
error("Thread has been unlocked.", true);
}
}
//AUTOSAGE
if (($config['mod']['thread_autosage'] <= $mod_level) && isset($_POST['autosage'])) {
$thread_info = file_get_contents($path . '/' . $database_folder . '/boards/' . $delrep_board . '/' . $delrep_thread . '/info.php');
if (preg_match('/\$info_autosage=1;/i', $thread_info) == true) {
$thread_info = preg_replace('/\$info_autosage=1;/i', '$info_autosage=0;', $thread_info);
$thread_autosage = false;
} else {
$thread_info = preg_replace('/\$info_autosage=0;/i', '$info_autosage=1;', $thread_info);
$thread_autosage = true;
}
file_put_contents($path . '/' . $database_folder . '/boards/' . $delrep_board . '/' . $delrep_thread . '/info.php', $thread_info);
if ($thread_autosage == true) {
error("Thread has been autosaged.", true);
} else {
error("Thread has been unautosaged.", true);
}
}
//BAN USER
if (($config['mod']['ban'] <= $mod_level) && isset($_POST['create-ban'])) {
if (!file_exists($path . '/' . $database_folder . '/bans')) {
mkdir($path . '/' . $database_folder . '/bans');
}
//create ban id counter if doesnt exist
if (!file_exists($path . '/' . $database_folder . '/bans/counter.php')) {
file_put_contents($path . '/' . $database_folder . '/bans/counter.php', 0);
}
//check ban form requirements isnt manipulated (duration, reason, etc) and set stuff
if (!isset($_POST['ban-expire'])){
error('Ban expiry form not given.');
}
$ban_reason = phpClean($_POST['ban-reason']);
$ban_expire = phpClean($_POST['ban-expire']);
$ban_message = phpClean($_POST['ban-message']);
if (strlen($ban_reason) > 256) {
error('Ban reason too long. Maximum 256 characters.');
}
if (strlen($ban_message) > 256) {
error('Ban message too long. Maximum 256 characters.');
}
if ($ban_reason == '') {
$ban_reason = 'No reason given.';
}
if ($delrep_thread == $delrep_reply) { //IF OP
$ban_content = file_get_contents($path . '/' . $database_folder . '/boards/' . $delrep_board . '/' . $delrep_thread . '/OP.php');
//TO DO
if (isset($_POST['public'])) {
$new_body = preg_replace('/^.+_body = "/i', '', $ban_content); //before "
$new_body = preg_replace('/";.+/i','' , $new_body); //after "
$new_body .= '<br><br><span class=\'banned\'>'; //add ban message
if ($ban_message == "") {
$new_body .= '(User was banned for this post.)';
} else {
$new_body .= $ban_message;
}
$new_body .= '</span>';
$save_file = preg_replace('/_body = ".*?"/i', '_body = "' . $new_body . '"', $ban_content); //replace post body
file_put_contents($path . '/' . $database_folder . '/boards/' . $delrep_board . '/' . $delrep_thread . '/OP.php', $save_file);
}
} else { //IF REPLY
$ban_content = file_get_contents($path . '/' . $database_folder . '/boards/' . $delrep_board . '/' . $delrep_thread . '/' . $delrep_reply . '.php');
if (isset($_POST['public'])) {
$new_body = preg_replace('/^.+_body = "/i', '', $ban_content); //before "
$new_body = preg_replace('/";.+/i','' , $new_body); //after "
$new_body .= '<br><br><span class=\'banned\'>'; //add ban message
if ($ban_message == "") {
$new_body .= '(User was banned for this post.)';
} else {
$new_body .= $ban_message;
}
$new_body .= '</span>';
$save_file = preg_replace('/_body = ".*?"/i', '_body = "' . $new_body . '"', $ban_content); //replace post body
file_put_contents($path . '/' . $database_folder . '/boards/' . $delrep_board . '/' . $delrep_thread . '/' . $delrep_reply . '.php', $save_file);
}
}
$new_ban['id'] = file_get_contents($path . '/' . $database_folder . '/bans/counter.php');
$new_ban['ip'] = preg_replace('/^.+(_ip = ")/i','' , $ban_content); //before ip
$new_ban['ip'] = preg_replace('/";.+$/i','' , $new_ban['ip']); //after ip
$new_ban['original_ip'] = $new_ban['ip'];
$new_ban['ip'] = preg_replace('/(\/|\.)/i','' , $new_ban['ip']); //remove dots and slashes from ip to create folder
if (!file_exists($path . '/' . $database_folder . '/bans/' . $new_ban['ip'])) {
mkdir($path . '/' . $database_folder . '/bans/' . $new_ban['ip']);
}
//create ban information
//$new_ban['post-filename'] = preg_replace('/^.+(_ip = ")/i','' , $ban_content);
//$new_ban['post-filename'] = preg_replace('/";.+$/i','' , $new_ban['post-filename']);
$new_ban['post-filename'] = ""; //do after the rest
$new_ban['post-time'] = preg_replace('/^.+(_time = ")/i','' , $ban_content);
$new_ban['post-time'] = preg_replace('/";.+$/i','' , $new_ban['post-time']);
$new_ban['post-name'] = preg_replace('/^.+(_name = ")/i','' , $ban_content);
$new_ban['post-name'] = preg_replace('/";.+$/i','' , $new_ban['post-name']);
$new_ban['post-email'] = preg_replace('/^.+(_email = ")/i','' , $ban_content);
$new_ban['post-email'] = preg_replace('/";.+$/i','' , $new_ban['post-email']);
$new_ban['post-subject'] = preg_replace('/^.+(_subject = ")/i','' , $ban_content);
$new_ban['post-subject'] = preg_replace('/";.+$/i','' , $new_ban['post-subject']);
$new_ban['post-body'] = preg_replace('/^.+(_body = ")/i','' , $ban_content);
$new_ban['post-body'] = preg_replace('/";.+$/i','' , $new_ban['post-body']);
$new_ban['time'] = time();
$new_ban['duration'] = $ban_expire;
if ($ban_expire == "warning") {
$new_ban['is_active'] = "0";
} else {
$new_ban['is_active'] = "1";
}
$new_ban['is_read'] = "0"; //replace on read
$create_ban = '<?php ';
$create_ban .= '$ban[\'id\'] = "'.$new_ban['id'].'"; ';
$create_ban .= '$ban[\'ip\'] = "'.$new_ban['ip'].'"; ';
$create_ban .= '$ban[\'original_ip\'] = "'.$new_ban['original_ip'].'"; ';
$create_ban .= '$ban[\'thread\'] = "'.$delrep_thread.'"; ';
$create_ban .= '$ban[\'reply\'] = "'.$delrep_reply.'"; ';
$create_ban .= '$ban[\'reason\'] = "'.$ban_reason.'"; ';
$create_ban .= '$ban[\'post-filename\'] = "'.$new_ban['post-filename'].'"; ';
$create_ban .= '$ban[\'post-time\'] = "'.$new_ban['post-time'].'"; ';
$create_ban .= '$ban[\'post-name\'] = "'.$new_ban['post-name'].'"; ';
$create_ban .= '$ban[\'post-email\'] = "'.$new_ban['post-email'].'"; ';
$create_ban .= '$ban[\'post-subject\'] = "'.$new_ban['post-subject'].'"; ';
$create_ban .= '$ban[\'post-body\'] = "'.$new_ban['post-body'].'"; ';
$create_ban .= '$ban[\'time\'] = "'.$new_ban['time'].'"; ';
$create_ban .= '$ban[\'duration\'] = "'.$new_ban['duration'].'"; ';
$create_ban .= '$ban[\'is_active\'] = "'.$new_ban['is_active'].'"; ';
$create_ban .= '$ban[\'is_read\'] = "'.$new_ban['is_read'].'"; ';
$create_ban .= '?>';
//id (counter), ip, original_ip, thread, reply, reason (post-filename, post-time, post-name, post-email, post-subject, post-body), time, duration, is_active, is_read (only change if is_active = 0)
file_put_contents($path . '/' . $database_folder . '/bans/' . $new_ban['ip'] . '/' . $new_ban['id'] . '.php', $create_ban); //save ban
file_put_contents($path . '/' . $database_folder . '/bans/counter.php', $new_ban['id'] + 1); //increase counter
if ($ban_expire == "warning") {
error('IP has been warned.', true);
} else {
error('IP has been banned.', true);
}
}
}
if (isset($_POST["delete"]) && $_POST["delete"] != "") {
if (isset($_POST['file'])) { //file only?
DeletePost($database_folder, $uploads_folder, $delrep_board, $delrep_thread, $delrep_reply, true, $secure_hash, $recent_replies, $config['mod']['post_delete'], $mod_level);
} else {
DeletePost($database_folder, $uploads_folder, $delrep_board, $delrep_thread, $delrep_reply, false, $secure_hash, $recent_replies, $config['mod']['post_delete'], $mod_level);
}
}
if (isset($_POST["report"]) && $_POST["report"] != "") {
if ($captcha_required == true) {
if(isset($_POST['captcha'])){
session_start();
if (($captcha_required == true) && ($_SESSION['captcha_text'] != strtolower($_POST['captcha']))) {
error('Wrong captcha!! How annoying...');
} else {
session_destroy();
}
} else {
error('No captcha entered.');
}
}
//CREATE GLOBAL REPORT
if (isset($_POST["global"]) && $_POST["global"] == "on") {
if (!file_exists($path . '/' . $database_folder . '/reportsglobal')) {
mkdir($path . '/' . $database_folder . '/reportsglobal');
}
if (!file_exists($path . '/' . $database_folder . '/reportsglobal/counter.php')) {
file_put_contents($path . '/' . $database_folder . '/reportsglobal/counter.php', 0);
}
$counter = file_get_contents($path . '/' . $database_folder . '/reportsglobal/counter.php');
$newcount = $counter + 1;
$create_report = '<?php ';
$create_report .= '$report_reason = "' . $report_reason . '";';
$create_report .= '$report_ip = "' . crypt($_SERVER['REMOTE_ADDR'] , $secure_hash) . '";';
$create_report .= '$report_board = "' . $delrep_board . '";';
$create_report .= '$report_thread = "' . $delrep_thread . '";';
if (isset($delrep_reply)) {
$create_report .= '$report_reply = "' . $delrep_reply . '";';
}
$create_report .= '?>';
file_put_contents($path . '/' . $database_folder . '/reportsglobal/' . $newcount . '.php', $create_report);
file_put_contents($path . '/' . $database_folder . '/reportsglobal/counter.php', $newcount);
//increment counter
ReportCounter($database_folder, 'global'); //refresh report counter
//done
if (file_exists($path . '/' . $database_folder . '/reportsglobal/' . $newcount . '.php')) {
error('Global Report Created!', true);
} else {
error('Failed generating Global Report...');
}
}
//CREATE BOARD REPORT
//create reports folder
if (!file_exists($path . '/' . $database_folder . '/reports')) {
mkdir($path . '/' . $database_folder . '/reports');
}
//create board reports folder
if (!file_exists($path . '/' . $database_folder . '/reports/' . $delrep_board)) {
mkdir($path . '/' . $database_folder . '/reports/' . $delrep_board);
}
//create counter
if (!file_exists($path . '/' . $database_folder . '/reports/' . $delrep_board . '/counter.php')) {
file_put_contents($path . '/' . $database_folder . '/reports/' . $delrep_board . '/counter.php', 0);
}
$counter = file_get_contents($path . '/' . $database_folder . '/reports/' . $delrep_board . '/counter.php');
$newcount = $counter + 1;
$create_report = '<?php ';
$create_report .= '$report_reason = "' . $report_reason . '";';
$create_report .= '$report_ip = "' . crypt($_SERVER['REMOTE_ADDR'] , $secure_hash) . '";';
$create_report .= '$report_board = "' . $delrep_board . '";';
$create_report .= '$report_thread = "' . $delrep_thread . '";';
if (isset($delrep_reply)) {
$create_report .= '$report_reply = "' . $delrep_reply . '";';
}
$create_report .= '?>';
file_put_contents($path . '/' . $database_folder . '/reports/' . $delrep_board . '/' . $newcount . '.php', $create_report);
file_put_contents($path . '/' . $database_folder . '/reports/' . $delrep_board . '/counter.php', $newcount);
//increment counter
ReportCounter($database_folder, 'normal'); //refresh report counter
//done
if (file_exists($path . '/' . $database_folder . '/reports/' . $delrep_board . '/' . $newcount . '.php')) {
error('Board Report Created!', true);
} else {
error('Failed generating Board Report...');
}
}
error('uh... supposed to exit before this');
?>
Reference in New Issue View Git Blame Copy Permalink